Re: Software that scans for SSN

[Lee Weers <weersl () CENTRAL EDU>]

After thinking on this further, I have submitted a plug in request to
Packeteer to look for SSN and credit card numbers so that the packets
can be discarded at the packetshaper.  I would think they should be able
to do this with their deep level of packet inspection they always state.
I also suggested a discard only rule so to not allow the harvesting of
the information.

Maybe others would want to submit the same request?  

-----Original Message-----
From: Leila Lyons [mailto:leila () UDEL EDU] 
Sent: Tuesday, September 27, 2005 12:22 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Software that scans for SSN

Colleagues:

As part of the University of Delaware's project
       http://www.udel.edu/pnpi/
to protect personal non-public information, (e.g. SSNs, credit card/bank
account numbers, medical/educational records, and other sensitive,
confidential or protected data), we have been looking at software that
would scan files and e-mail for SSNs in particular.
The software would be used on systems that we know have been
compromised.

Those that we have found so far are:
a) Ontrack Power Controls
b) Sherpa Mail Attender
c) Sherpa Discovery Attender
d) Quest Recover Manager for Exchange
e) Copernic

Are any of you using one of these products, or a different one, and
willing to share your experiences?

You can respond to me and I will summarize to the list.
Thank you!

Leila Lyons
Director, IT-User Services
University of Delaware